📑
Security Notes
  • Readme
  • Resources
    • Useful sites
    • Metasploit
      • Searchsploit
      • Msfvenom
      • Meterpreter
    • Shells
    • Linux
      • Cron
      • Connection
      • Compilers
    • Windows
      • Kernel exploits table
    • Bruteforce
      • Checklist
      • John the Ripper
      • Hashcat
    • BOF
      • Assembly
    • Gaining access checklist
  • Cloud - AWS
    • Enumeration
    • References
    • Bucket S3
      • Public Bucket
      • AMI Files
      • File upload to RCE
    • EC2
      • cloud-init Exploits
      • SSRF To AWS Role compromise
      • Unencrypted EBS
    • IAM
      • Account Disclosure by resource policy
    • Lambda Function
      • Code Injection
      • Attacking APIs
    • VPC
      • Expose Resources
  • Networking
    • Nmap
      • Scan types
    • TCPDump
    • Port forwarding
    • Ports
      • 21 - FTP
      • 22 - SSH
      • 25 465 587 - SMTP
      • 53 - DNS
      • 110 995 - POP3
      • 111 - NFS
      • 113 - Ident
      • 123 - NTP
      • 135 137 139 - RPC
      • 143 993 - IMAP
      • 161 - SNMP
      • 389 - LDAP
      • 139 445 - SMB
      • 873 - Rsync
      • 6379 - Redis
      • 6667 - IRC
  • Linux PrivEsc
    • Checklist
    • Enumeration
      • Important files
      • Memory Dump
    • Privileges Exploitation
    • Wildcard Exploits
    • Sudo Exploits
    • Docker Container
    • Docker Groups
    • Common Exploits
  • Windows PrivEsc
    • Checklist
    • Enumeration
      • Important Files
    • Antivirus evasion tools
    • Unquoted paths
    • Always install elevated
    • Vulnerable services
    • Client side
    • Exploitable privileges
      • Juicy Potato
    • UAC bypass
    • Common Exploits
  • Active Directory
    • Introduction
    • Checklist
    • Enumeration
    • Enable RDP
    • Kerberos
    • Rubeus
    • Credentials harvesting
      • Domain Controller specific
    • Connection
    • Pass The Hash
    • Kerberoast
    • ASREProast
    • Tickets
  • Web Attacks
    • Checklist
    • Enumeration
      • URL bruteforcing
    • APIs and Fields
    • Authentication
    • Filter Evasion
      • Fuzzying and encoding
    • File Vulnerabilities
      • LFI List
      • PHP shells
    • RCE
    • Code Injection
    • Dependency Injection
    • Joomla
    • Wordpress
    • WebDAV
    • HTTP
    • XSS
      • DOM Based
      • Reflected
      • Filter Evasion
    • SSI
    • SSTI
    • RCE
    • CSRF
    • SQL injection
      • sqlmap
      • PostgreSQL
      • Oracle
      • MSSQL
      • MySQL
      • Login
    • XPath injection
    • XXE
    • CORS
  • MOBILE PENTESTING
    • Static Code Analysis
    • Dynamic Code Analysis
    • Network Traffic Analysis
Powered by GitBook
On this page
  • ARN Structure
  • Services
  • Regions
  • ID Prefixes
  1. Cloud - AWS

References

PreviousEnumerationNextBucket S3

Last updated 1 year ago

ARN Structure

Generic structure

arn:partition:service:region:account-id:resource-id
arn:partition:service:region:account-id:resource-type/resource-id
arn:partition:service:region:account-id:resource-type:resource-id

  • Partition: can be one of the following: aws, aws-cn (Chinese branch), aws-us-gov (US Gov restricted access)

  • Account-id: account id of the resource owner

  • Resource-id: id code of the specified resource or service

  • Resource-type: some resource categories allow more granularity when searching for a particular resource. For instance EC2 services can be subdivided into instances, images, security groups and so on

Services

The following repository contains a list of services grouped by resource. The list is generated from the AWS documentation

Regions

Code
Name

us-east-2

US East (Ohio)

us-east-1

US East (Virginia)

us-west-1

US West (N. California)

us-west-2

US West (Oregon)

ap-south-1

Asia Pacific (Mumbai)

ap-northeast-3

Asia Pacific (Osaka)

ap-northeast-2

Asia Pacific (Seoul)

ap-southeast-1

Asia Pacific (Singapore)

ap-southeast-2

Asia Pacific (Sydney)

ap-northeast-1

Asia Pacific (Tokyo)

ca-central-1

Canada (Central)

eu-central-1

Europe (Frankfurt)

eu-west-1

Europe (Ireland)

eu-west-2

Europe (London)

eu-west-3

Europe (Paris)

eu-north-1

Europe (Stockholm)

sa-east-1

South America (São Paulo)

Opt-in regions

Code
Name

af-south-1

Africa (Cape Town)

ap-east-1

Asia Pacific (Hong Kong)

ap-south-2

Asia Pacific (Hyderabad)

ap-southeast-3

Asia Pacific (Jakarta)

ap-southeast-4

Asia Pacific (Melbourne)

ca-west-1

Canada West (Calgary)

eu-south-1

Europe (Milan)

eu-south-2

Europe (Spain)

eu-central-2

Europe (Zurich)

il-central-1

Israel (Tel Aviv)

me-south-1

Middle East (Bahrain)

me-central-1

Middle East (UAE)

ID Prefixes

Prefix
Resource type

ABIA

ACCA

Context-specific credential

AGPA

User group

AIDA

IAM user

AIPA

Amazon EC2 instance profile

AKIA

Access key

ANPA

Managed policy

ANVA

Version in a managed policy

APKA

Public key

AROA

Role

ASCA

Certificate

ASIA

use this prefix, but are unique only in combination with the secret access key and the session token.

AWS STS service bearer token
Temporary (AWS STS) access key IDs
Service
Region
aws-service-list/generated_docs/aws_services.md at main · fborsani/aws-service-listGitHub
Logo